Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
SUSE has released an important patch for Node.js 16, addressing 31 vulnerabilities, including CVE-2025-23085 and CVE-2025-23166, which could lead to memory leaks and process crashes. The vulnerabilities affect various SUSE Linux Enterprise Server versions and could expose in-process secrets and caus...
Multiple versions of Node.js (20, 22, and 24) have been identified with a critical denial of service (DoS) vulnerability affecting users on Fedora 42. The vulnerability can lead to resource exhaustion, necessitating updates to versions 20.20.0, 22.22.0, and 24.13.0 to mitigate the issue.
openSUSE Leap 15.6 has released a security advisory addressing multiple vulnerabilities in Node.js 22. Key issues include a resource exhaustion vulnerability (CVE-2026-22036) and denial of service due to TLS error handling bypass (CVE-2026-21637), affecting users of the platform. Additional fixes al...
SUSE and openSUSE have released an important security update for Node.js 20, addressing several vulnerabilities. The update includes fixes for issues such as unsafe buffer creation and error handling in TLSSocket, affecting users of Node.js 20. Key CVEs include CVE-2026-22036 and CVE-2025-59465, amo...
